The WIDGET1 OES NetWare server resides in .SLC . WIDGET. All of its associated volume objects reside in the same context. The JJenkins user object also resides in .SLC . WIDGET. What rights does he…

Read alone is not the complete default because File Scan is also granted via the [Public] trustee assignment to SYS:\PUBLIC.

Supervisor rights are not granted by default to SYS:\PUBLIC for ordinary authenticated users.

Read and Write is not the default assignment; Write would allow users to place or overwrite files in SYS:\PUBLIC, which is not the intended default.

NetWare automatically assigns the [Public] trustee Read and File Scan rights to the SYS:\PUBLIC directory so that all network users can browse and execute the public utilities stored there. Because JJenkins is an authenticated user object, he inherits these [Public] trustee rights and has exactly Read and File Scan access to SYS:\PUBLIC regardless of his container location.

Read, Write, and Create exceed the [Public] trustee default; Write and Create are not granted by default to SYS:\PUBLIC.

Write, Create, and Erase are not granted by default and would allow unintended modification or deletion of public utilities.

Erase is not included in the [Public] trustee default assignment to SYS:\PUBLIC.

Read, Write, Create, and Erase represent elevated rights that are never part of the default [Public] trustee assignment for SYS:\PUBLIC.

This set adds Modify on top of already excessive rights; none of Write, Create, Erase, or Modify are in the default [Public] trustee assignment.

JJenkins does have rights to SYS:\PUBLIC by virtue of the [Public] trustee assignment that applies to all network users by default.